Sorvepotel Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
November 12, 2025
Last Seen
May 7, 2026

Related Threat Clusters

  • TCLBANKER Trojan Targets Brazilian Financial Sector via Logitech Installer

    A new banking trojan named TCLBANKER has emerged, targeting 59 Brazilian banking, fintech, and cryptocurrency platforms. Discovered by Elastic Security Labs, the malware utilizes a trojanized MSI installer of Logitech's…

    8 articles · Updated May 7, 2026
  • WhatsApp Malware Campaign Targets Brazilian Crypto Users

    A sophisticated malware campaign in Brazil is exploiting WhatsApp to target cryptocurrency users, deploying a banking trojan named 'Eternidade Stealer.' This malware hijacks devices, steals financial data, and spreads…

    19 articles · Updated November 26, 2025
  • WhatsApp Vulnerability Exposes Data of 3.5 Billion Users

    A significant security flaw in WhatsApp's discovery system allowed researchers to access the phone numbers and personal information of approximately 3.5 billion users globally. The vulnerability, which exploited a…

    37 articles · Updated November 28, 2025
  • Maverick Malware Targets WhatsApp Web Users in Brazil

    Maverick malware is a banking trojan that specifically targets WhatsApp Web users in Brazil, aiming to hijack accounts and steal credentials from Latin American financial institutions. It propagates through malicious…

    2 articles · Updated November 12, 2025

Recent Intelligence Reports

  • Tclbanker Brazilian Banking Trojan — www.elastic.co · May 7, 2026
  • New TCLBanker malware self — Bleepingcomputer · May 7, 2026
  • WhatsApp Screen-Sharing Scam Drains $700K in Minutes — Esecurityplanet · November 18, 2025
  • Maverick Malware May Hijack WhatsApp Web Accounts Targeting Brazil — Bitget · November 12, 2025
  • Maverick Malware May Hijack WhatsApp Web Accounts Targeting Brazil — Bitget · November 12, 2025

CVSS v3.1 Breakdown